Bump to v0.8.0-rc1 tag

Signed-off-by: Sunjay Bhatia <[email protected]>
projectcontour · Aug 15, 2023 · 855039f · 855039f
1 parent e6f2599
commit 855039f
Show file tree

Hide file tree

Showing 6 changed files with 294 additions and 78 deletions.
diff --git a/examples/gateway/00-crds.yaml b/examples/gateway/00-crds.yaml
@@ -2,8 +2,8 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/1923
-    gateway.networking.k8s.io/bundle-version: v0.7.1-dev
+    api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/2245
+    gateway.networking.k8s.io/bundle-version: v0.8.0-rc1
     gateway.networking.k8s.io/channel: experimental
   creationTimestamp: null
   name: gatewayclasses.gateway.networking.k8s.io
@@ -444,8 +444,8 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/1923
-    gateway.networking.k8s.io/bundle-version: v0.7.1-dev
+    api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/2245
+    gateway.networking.k8s.io/bundle-version: v0.8.0-rc1
     gateway.networking.k8s.io/channel: experimental
   creationTimestamp: null
   name: gateways.gateway.networking.k8s.io
@@ -2032,8 +2032,8 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/1923
-    gateway.networking.k8s.io/bundle-version: v0.7.1-dev
+    api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/2245
+    gateway.networking.k8s.io/bundle-version: v0.8.0-rc1
     gateway.networking.k8s.io/channel: experimental
   creationTimestamp: null
   name: grpcroutes.gateway.networking.k8s.io
@@ -2187,7 +2187,7 @@ spec:
                   namespace are \"consumer\" routes, and these routing rules are only
                   applied to outbound connections originating from the same namespace
                   as the Route, for which the intended destination of the connections
-                  are a Service targeted as a ParentRef of the Route."
+                  are a Service targeted as a ParentRef of the Route. \n "
                 items:
                   description: "ParentReference identifies an API object (usually
                     a Gateway) that can be considered a parent of this resource (usually
@@ -2310,6 +2310,18 @@ spec:
                   type: object
                 maxItems: 32
                 type: array
+                x-kubernetes-validations:
+                - message: sectionName or port must be unique when parentRefs includes
+                    2 or more references to the same parent
+                  rule: self.all(p1, self.exists_one(p2, p1.group == p2.group && p1.kind
+                    == p2.kind && ((!has(p1.__namespace__) && !has(p2.__namespace__))
+                    || (!has(p1.__namespace__) && p2.__namespace__ == '') || (p1.__namespace__
+                    == '' && !has(p2.__namespace__)) || (p1.__namespace__ == p2.__namespace__))
+                    && p1.name == p2.name && ((!has(p1.sectionName) && !has(p2.sectionName))
+                    || (!has(p1.sectionName) && p2.sectionName == '') || (p1.sectionName
+                    == '' && !has(p2.sectionName)) || (p1.sectionName == p2.sectionName))
+                    && ((!has(p1.port) && !has(p2.port)) || (!has(p1.port) && p2.port
+                    == 0) || (p1.port == 0 && !has(p2.port)) || (p1.port == p2.port))))
               rules:
                 default:
                 - matches:
@@ -3614,8 +3626,8 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/1923
-    gateway.networking.k8s.io/bundle-version: v0.7.1-dev
+    api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/2245
+    gateway.networking.k8s.io/bundle-version: v0.8.0-rc1
     gateway.networking.k8s.io/channel: experimental
   creationTimestamp: null
   name: httproutes.gateway.networking.k8s.io
@@ -3756,7 +3768,7 @@ spec:
                   namespace are \"consumer\" routes, and these routing rules are only
                   applied to outbound connections originating from the same namespace
                   as the Route, for which the intended destination of the connections
-                  are a Service targeted as a ParentRef of the Route."
+                  are a Service targeted as a ParentRef of the Route. \n "
                 items:
                   description: "ParentReference identifies an API object (usually
                     a Gateway) that can be considered a parent of this resource (usually
@@ -3879,6 +3891,18 @@ spec:
                   type: object
                 maxItems: 32
                 type: array
+                x-kubernetes-validations:
+                - message: sectionName or port must be unique when parentRefs includes
+                    2 or more references to the same parent
+                  rule: self.all(p1, self.exists_one(p2, p1.group == p2.group && p1.kind
+                    == p2.kind && ((!has(p1.__namespace__) && !has(p2.__namespace__))
+                    || (!has(p1.__namespace__) && p2.__namespace__ == '') || (p1.__namespace__
+                    == '' && !has(p2.__namespace__)) || (p1.__namespace__ == p2.__namespace__))
+                    && p1.name == p2.name && ((!has(p1.sectionName) && !has(p2.sectionName))
+                    || (!has(p1.sectionName) && p2.sectionName == '') || (p1.sectionName
+                    == '' && !has(p2.sectionName)) || (p1.sectionName == p2.sectionName))
+                    && ((!has(p1.port) && !has(p2.port)) || (!has(p1.port) && p2.port
+                    == 0) || (p1.port == 0 && !has(p2.port)) || (p1.port == p2.port))))
               rules:
                 default:
                 - matches:
@@ -6126,7 +6150,7 @@ spec:
                   namespace are \"consumer\" routes, and these routing rules are only
                   applied to outbound connections originating from the same namespace
                   as the Route, for which the intended destination of the connections
-                  are a Service targeted as a ParentRef of the Route."
+                  are a Service targeted as a ParentRef of the Route. \n "
                 items:
                   description: "ParentReference identifies an API object (usually
                     a Gateway) that can be considered a parent of this resource (usually
@@ -6249,6 +6273,18 @@ spec:
                   type: object
                 maxItems: 32
                 type: array
+                x-kubernetes-validations:
+                - message: sectionName or port must be unique when parentRefs includes
+                    2 or more references to the same parent
+                  rule: self.all(p1, self.exists_one(p2, p1.group == p2.group && p1.kind
+                    == p2.kind && ((!has(p1.__namespace__) && !has(p2.__namespace__))
+                    || (!has(p1.__namespace__) && p2.__namespace__ == '') || (p1.__namespace__
+                    == '' && !has(p2.__namespace__)) || (p1.__namespace__ == p2.__namespace__))
+                    && p1.name == p2.name && ((!has(p1.sectionName) && !has(p2.sectionName))
+                    || (!has(p1.sectionName) && p2.sectionName == '') || (p1.sectionName
+                    == '' && !has(p2.sectionName)) || (p1.sectionName == p2.sectionName))
+                    && ((!has(p1.port) && !has(p2.port)) || (!has(p1.port) && p2.port
+                    == 0) || (p1.port == 0 && !has(p2.port)) || (p1.port == p2.port))))
               rules:
                 default:
                 - matches:
@@ -8384,8 +8420,8 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/1923
-    gateway.networking.k8s.io/bundle-version: v0.7.1-dev
+    api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/2245
+    gateway.networking.k8s.io/bundle-version: v0.8.0-rc1
     gateway.networking.k8s.io/channel: experimental
   creationTimestamp: null
   name: referencegrants.gateway.networking.k8s.io
@@ -8670,8 +8706,8 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/1923
-    gateway.networking.k8s.io/bundle-version: v0.7.1-dev
+    api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/2245
+    gateway.networking.k8s.io/bundle-version: v0.8.0-rc1
     gateway.networking.k8s.io/channel: experimental
   creationTimestamp: null
   name: tcproutes.gateway.networking.k8s.io
@@ -8747,7 +8783,7 @@ spec:
                   namespace are \"consumer\" routes, and these routing rules are only
                   applied to outbound connections originating from the same namespace
                   as the Route, for which the intended destination of the connections
-                  are a Service targeted as a ParentRef of the Route."
+                  are a Service targeted as a ParentRef of the Route. \n "
                 items:
                   description: "ParentReference identifies an API object (usually
                     a Gateway) that can be considered a parent of this resource (usually
@@ -8870,6 +8906,18 @@ spec:
                   type: object
                 maxItems: 32
                 type: array
+                x-kubernetes-validations:
+                - message: sectionName or port must be unique when parentRefs includes
+                    2 or more references to the same parent
+                  rule: self.all(p1, self.exists_one(p2, p1.group == p2.group && p1.kind
+                    == p2.kind && ((!has(p1.__namespace__) && !has(p2.__namespace__))
+                    || (!has(p1.__namespace__) && p2.__namespace__ == '') || (p1.__namespace__
+                    == '' && !has(p2.__namespace__)) || (p1.__namespace__ == p2.__namespace__))
+                    && p1.name == p2.name && ((!has(p1.sectionName) && !has(p2.sectionName))
+                    || (!has(p1.sectionName) && p2.sectionName == '') || (p1.sectionName
+                    == '' && !has(p2.sectionName)) || (p1.sectionName == p2.sectionName))
+                    && ((!has(p1.port) && !has(p2.port)) || (!has(p1.port) && p2.port
+                    == 0) || (p1.port == 0 && !has(p2.port)) || (p1.port == p2.port))))
               rules:
                 description: Rules are a list of TCP matchers and actions.
                 items:
@@ -9257,8 +9305,8 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/1923
-    gateway.networking.k8s.io/bundle-version: v0.7.1-dev
+    api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/2245
+    gateway.networking.k8s.io/bundle-version: v0.8.0-rc1
     gateway.networking.k8s.io/channel: experimental
   creationTimestamp: null
   name: tlsroutes.gateway.networking.k8s.io
@@ -9380,7 +9428,7 @@ spec:
                   namespace are \"consumer\" routes, and these routing rules are only
                   applied to outbound connections originating from the same namespace
                   as the Route, for which the intended destination of the connections
-                  are a Service targeted as a ParentRef of the Route."
+                  are a Service targeted as a ParentRef of the Route. \n "
                 items:
                   description: "ParentReference identifies an API object (usually
                     a Gateway) that can be considered a parent of this resource (usually
@@ -9503,6 +9551,18 @@ spec:
                   type: object
                 maxItems: 32
                 type: array
+                x-kubernetes-validations:
+                - message: sectionName or port must be unique when parentRefs includes
+                    2 or more references to the same parent
+                  rule: self.all(p1, self.exists_one(p2, p1.group == p2.group && p1.kind
+                    == p2.kind && ((!has(p1.__namespace__) && !has(p2.__namespace__))
+                    || (!has(p1.__namespace__) && p2.__namespace__ == '') || (p1.__namespace__
+                    == '' && !has(p2.__namespace__)) || (p1.__namespace__ == p2.__namespace__))
+                    && p1.name == p2.name && ((!has(p1.sectionName) && !has(p2.sectionName))
+                    || (!has(p1.sectionName) && p2.sectionName == '') || (p1.sectionName
+                    == '' && !has(p2.sectionName)) || (p1.sectionName == p2.sectionName))
+                    && ((!has(p1.port) && !has(p2.port)) || (!has(p1.port) && p2.port
+                    == 0) || (p1.port == 0 && !has(p2.port)) || (p1.port == p2.port))))
               rules:
                 description: Rules are a list of TLS matchers and actions.
                 items:
@@ -9893,8 +9953,8 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/1923
-    gateway.networking.k8s.io/bundle-version: v0.7.1-dev
+    api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/2245
+    gateway.networking.k8s.io/bundle-version: v0.8.0-rc1
     gateway.networking.k8s.io/channel: experimental
   creationTimestamp: null
   name: udproutes.gateway.networking.k8s.io
@@ -9970,7 +10030,7 @@ spec:
                   namespace are \"consumer\" routes, and these routing rules are only
                   applied to outbound connections originating from the same namespace
                   as the Route, for which the intended destination of the connections
-                  are a Service targeted as a ParentRef of the Route."
+                  are a Service targeted as a ParentRef of the Route. \n "
                 items:
                   description: "ParentReference identifies an API object (usually
                     a Gateway) that can be considered a parent of this resource (usually
@@ -10093,6 +10153,18 @@ spec:
                   type: object
                 maxItems: 32
                 type: array
+                x-kubernetes-validations:
+                - message: sectionName or port must be unique when parentRefs includes
+                    2 or more references to the same parent
+                  rule: self.all(p1, self.exists_one(p2, p1.group == p2.group && p1.kind
+                    == p2.kind && ((!has(p1.__namespace__) && !has(p2.__namespace__))
+                    || (!has(p1.__namespace__) && p2.__namespace__ == '') || (p1.__namespace__
+                    == '' && !has(p2.__namespace__)) || (p1.__namespace__ == p2.__namespace__))
+                    && p1.name == p2.name && ((!has(p1.sectionName) && !has(p2.sectionName))
+                    || (!has(p1.sectionName) && p2.sectionName == '') || (p1.sectionName
+                    == '' && !has(p2.sectionName)) || (p1.sectionName == p2.sectionName))
+                    && ((!has(p1.port) && !has(p2.port)) || (!has(p1.port) && p2.port
+                    == 0) || (p1.port == 0 && !has(p2.port)) || (p1.port == p2.port))))
               rules:
                 description: Rules are a list of UDP matchers and actions.
                 items:

diff --git a/examples/gateway/02-certificate_config.yaml b/examples/gateway/02-certificate_config.yaml
@@ -92,8 +92,8 @@ spec:
         imagePullPolicy: IfNotPresent
         args:
         - create
-        - --host=gateway-api-admission-server,gateway-api-admission-server.gateway-system.svc
-        - --namespace=gateway-system
+        - --host=gateway-api-admission-server,gateway-api-admission-server.$(POD_NAMESPACE).svc
+        - --namespace=$(POD_NAMESPACE)
         - --secret-name=gateway-api-admission
         env:
         - name: POD_NAMESPACE
@@ -139,7 +139,7 @@ spec:
         args:
         - patch
         - --webhook-name=gateway-api-admission
-        - --namespace=gateway-system
+        - --namespace=$(POD_NAMESPACE)
         - --patch-mutating=false
         - --patch-validating=true
         - --secret-name=gateway-api-admission